Builds a Concurrency Table of Minute x Hour to be later displayed as a Heatmap using table's overlay

gistfile1.txt

index=_internal sourcetype=scheduler search_type="scheduled" scheduled_time=* savedsearch_name=*rule scheduler rule earliest=-24h@h latest=@h

| eventstats count by savedsearch_name
| where count>=23

| eval H=strftime(scheduled_time, "%-H")
| eval M=strftime(scheduled_time, "%-M")

| chart limit=24 count over M by H
| table M 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
| addtotals
| where Total>80  ``` Set this accordingly ```